CVE-2019-10205

CVE-2019-10205 describes a flaw in Red Hat Quay where robot account tokens are stored in plain text within the database. An attacker with database query access could leverage these exposed tokens to gain unauthorized read or write access to container images. This vulnerability carries a CVSS score of 6.3 (Medium), indicating a local attack vector with low complexity, requiring high privileges, and potentially leading to low confidentiality and high integrity/availability impacts. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.